This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: pPC1/9emw7qsE2GC27nqkyf0QEe5+4x18VcJQvrLbCs= Subject key identifier: A0:49:36:54:9E:91:99:43:0A:1C:DF:49:A6:90:31:0E:D2:C0:C5:43 Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 1ADF285691C76D026DD20461E61A8304AFEB9AB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 0231 Signing time: Thu 18 Dec 2025 09:21:18 +0000 Manifest this update: Thu 18 Dec 2025 09:16:18 +0000 Manifest next update: Sun 21 Dec 2025 17:59:18 +0000 Files and hashes: 1: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: r9SVfRPCCO6Vtp/Ep+AtielHzNI3IGy4ov5IgZ3sTaU=) 2: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: BM3/ntG2tCXetdLzUXN2Dv36rJzRqgaPhlxdrf1W2CU=) 3: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: Gx/xRp9/GPpDRV2CmGHYAn9+vB7HJHXRC6EZN2z/w5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:df:28:56:91:c7:6d:02:6d:d2:04:61:e6:1a:83:04:af:eb:9a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Dec 18 09:16:18 2025 GMT Not After : Dec 21 17:59:18 2025 GMT Subject: CN=A04936549E9199430A1CDF49A690310ED2C0C543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:e3:60:63:87:8a:7c:ea:bd:66:b9:36:82: 20:e8:29:03:c4:1e:85:ce:93:5c:e9:99:e5:36:be: 01:27:dc:32:b5:10:a3:6f:10:4e:c6:6a:fe:ed:18: ce:f7:af:59:3d:55:dd:88:12:05:96:17:6a:bb:d3: 3f:3d:92:53:5e:3f:39:73:f1:24:7c:13:35:37:9f: 99:af:19:09:07:34:35:e7:52:b3:c7:5d:a9:2c:56: 35:82:b9:f7:46:a8:ea:ef:b9:a5:93:59:41:0d:a4: a4:23:71:4a:f3:43:24:04:4c:36:7b:23:32:54:d6: 3a:c2:28:da:a1:e3:e2:96:fe:9e:6f:6c:d0:ed:b1: 41:b6:eb:46:c2:bb:f0:94:75:79:64:51:37:0f:55: 49:6d:db:99:a7:81:44:14:eb:cc:49:b5:64:c3:10: af:08:70:71:e1:f9:fa:69:3c:77:2a:4b:fc:44:a0: 4d:98:7c:a5:ca:89:3b:22:20:86:ab:27:ab:13:05: a1:0d:51:31:90:2c:38:ee:36:d2:63:20:57:6a:7f: c1:d9:bf:01:97:f2:82:d5:a9:67:cf:78:5b:b1:54: 83:74:99:c4:4e:90:da:71:08:87:f1:e9:69:1c:c6: ed:88:4e:ea:84:6d:a1:61:8b:8f:fe:52:da:ce:d6: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:49:36:54:9E:91:99:43:0A:1C:DF:49:A6:90:31:0E:D2:C0:C5:43 X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b3:6d:5c:b9:84:ba:fc:8b:32:c9:18:77:51:dc:55:12:b7: 8f:f7:58:d9:e3:31:bb:f7:a9:87:d7:13:8b:97:1d:79:57:76: 66:1f:2f:47:b8:61:1c:31:91:29:a5:ec:41:dc:12:aa:b8:f6: 6f:ff:c9:67:6f:9f:fc:65:9a:d5:6f:13:88:29:93:7b:7b:6e: 8f:7d:29:a5:34:79:43:f7:45:10:e2:cd:32:03:94:32:e3:98: e2:3a:74:23:39:b8:c0:59:dc:8b:ea:ac:aa:4a:1e:77:ec:5c: 2f:91:34:1c:04:94:99:17:cc:9f:99:f0:bb:81:e0:73:b3:18: db:36:47:40:e4:01:5e:55:aa:bf:f2:36:f5:e4:2f:98:c6:1f: 6c:90:ff:e0:36:57:85:06:bb:47:60:e9:3a:9e:01:26:1d:6c: 16:39:2e:40:ce:82:cd:f9:5b:4d:4b:bc:42:40:34:11:fa:85: b6:d6:92:d9:6f:5d:d6:66:6b:df:51:7e:6e:86:7e:e9:88:04: 6c:2c:97:7d:12:eb:61:07:3f:6b:ae:cf:d1:40:d4:0a:18:70: 5d:98:bb:63:9f:ce:4b:70:28:22:4f:0e:3d:62:6a:72:b4:ff: 7c:34:1e:da:c0:a5:e6:bc:40:a3:30:7f:ab:e5:e1:9e:0a:ba: 5d:08:b2:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGt8oVpHHbQJt0gRh5hqDBK/rmrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNTEyMTgwOTE2MThaFw0yNTEyMjExNzU5MThaMDMxMTAvBgNV BAMTKEEwNDkzNjU0OUU5MTk5NDMwQTFDREY0OUE2OTAzMTBFRDJDMEM1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6uNgY4eKfOq9Zrk2giDoKQPE HoXOk1zpmeU2vgEn3DK1EKNvEE7Gav7tGM73r1k9Vd2IEgWWF2q70z89klNePzlz 8SR8EzU3n5mvGQkHNDXnUrPHXaksVjWCufdGqOrvuaWTWUENpKQjcUrzQyQETDZ7 IzJU1jrCKNqh4+KW/p5vbNDtsUG260bCu/CUdXlkUTcPVUlt25mngUQU68xJtWTD EK8IcHHh+fppPHcqS/xEoE2YfKXKiTsiIIarJ6sTBaENUTGQLDjuNtJjIFdqf8HZ vwGX8oLVqWfPeFuxVIN0mcROkNpxCIfx6Wkcxu2ITuqEbaFhi4/+UtrO1ltZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoEk2VJ6RmUMKHN9JppAxDtLAxUMwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKzbVy5hLr8izLJGHdR3FUSt4/3WNnjMbv3 qYfXE4uXHXlXdmYfL0e4YRwxkSml7EHcEqq49m//yWdvn/xlmtVvE4gpk3t7bo99 KaU0eUP3RRDizTIDlDLjmOI6dCM5uMBZ3IvqrKpKHnfsXC+RNBwElJkXzJ+Z8LuB 4HOzGNs2R0DkAV5Vqr/yNvXkL5jGH2yQ/+A2V4UGu0dg6TqeASYdbBY5LkDOgs35 W01LvEJANBH6hbbWktlvXdZma99Rfm6GfumIBGwsl30S62EHP2uuz9FA1AoYcF2Y u2OfzktwKCJPDj1ianK0/3w0HtrApea8QKMwf6vl4Z4Kul0IsqA= -----END CERTIFICATE-----Generated at Sat Dec 20 18:51:52 2025 by rpki-client